Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e302e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          7bXVA/8iKzHW2goX8s5TN83Nnl+bwbqA5Mzdabq2gRs=
Subject key identifier:   79:CB:07:2C:65:A0:1D:42:BC:81:CA:0B:73:24:70:C4:F8:13:62:03
Certificate issuer:       /CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
Certificate serial:       18E4553E69197E6CC575854BAB9CEF15BF88883C
Authority key identifier: F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32342d3234203d3e203436303439.roa
Signing time:             Sun 03 May 2026 02:59:21 +0000
ROA not before:           Sun 03 May 2026 02:54:21 +0000
ROA not after:            Sun 02 May 2027 02:59:21 +0000
asID:                     46049
IP address blocks:        182.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl
                          rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e4:55:3e:69:19:7e:6c:c5:75:85:4b:ab:9c:ef:15:bf:88:88:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Validity
            Not Before: May  3 02:54:21 2026 GMT
            Not After : May  2 02:59:21 2027 GMT
        Subject: CN=79CB072C65A01D42BC81CA0B732470C4F8136203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:50:a0:74:51:b1:3a:f6:8e:7e:4d:e3:e3:
                    08:f4:dd:41:2a:c8:ff:af:6e:18:79:24:b4:f9:5d:
                    d7:dc:53:0a:9a:f9:36:77:8c:70:09:29:dd:45:56:
                    14:4a:e6:8e:9e:8b:9e:15:50:f7:61:7e:a3:a8:45:
                    f9:28:6b:f9:21:2c:b0:25:90:42:3f:fc:65:50:44:
                    3c:0f:f0:0d:dd:cc:52:8c:48:7a:d2:49:25:47:81:
                    07:aa:1e:a2:fa:1e:f4:a8:95:12:5a:eb:59:95:19:
                    3d:96:86:ef:57:c1:c1:ae:d2:e8:8e:69:48:3d:22:
                    9e:3f:c5:b3:01:d0:7d:0c:a7:c0:38:6d:90:42:3e:
                    b0:45:c5:32:eb:2c:fc:15:56:b8:9e:0b:b7:10:c6:
                    a0:f0:2f:cb:58:96:57:3b:68:0f:89:d9:90:8d:da:
                    1b:0a:4d:20:4e:59:ba:93:a2:84:8c:d4:81:ad:a9:
                    c2:73:50:06:7c:7b:09:bd:30:16:da:a2:13:28:22:
                    fd:d0:4d:05:65:84:eb:ab:da:c5:1f:29:12:b7:f9:
                    a1:79:d7:ab:95:31:0f:06:a3:d0:2e:91:4c:8a:b9:
                    f3:52:50:b8:14:16:5b:62:89:23:e4:b4:9d:c9:6c:
                    a0:b5:01:54:34:1f:45:56:34:66:53:5d:ff:a9:dc:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:07:2C:65:A0:1D:42:BC:81:CA:0B:73:24:70:C4:F8:13:62:03
            X509v3 Authority Key Identifier:
                keyid:F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:4b:f2:74:e7:1e:a1:34:24:50:d5:75:cf:68:fb:71:a6:
         c4:e9:a7:cb:fc:78:47:b2:ff:45:5b:8c:92:e1:a4:dd:4a:8b:
         2f:13:88:31:8a:48:59:3f:01:eb:6e:bf:48:d1:e7:fc:ba:ff:
         a7:05:93:aa:83:b2:5d:64:24:7a:f2:7f:c6:16:13:00:c5:79:
         4d:e1:f4:5e:c7:04:75:9b:d7:0b:9a:ef:0a:f4:9a:d4:41:53:
         b1:46:9a:32:3a:17:05:64:9a:ae:f9:1d:82:68:be:79:43:da:
         77:e9:a8:44:b9:83:d1:8d:72:c6:20:6d:93:1a:30:70:ce:52:
         9d:4f:d0:7e:cf:25:10:86:7a:72:d7:5c:af:8b:c8:15:0d:e8:
         24:7e:28:cd:44:a2:15:b5:f1:62:2e:b2:47:b4:3f:57:93:5d:
         30:40:25:5b:68:cf:07:f3:6d:e2:3a:ac:05:a7:a5:99:c5:6d:
         94:cf:70:f0:f0:dc:29:1e:c3:9a:36:6f:1f:36:09:eb:f4:41:
         74:4b:51:72:52:0d:98:ff:44:c8:15:43:58:ad:28:4d:e4:a6:
         84:d8:f7:e2:89:58:2f:22:d1:23:32:5f:7a:b1:5b:83:fe:1e:
         25:71:40:52:7d:74:00:76:0e:05:25:04:66:eb:5c:35:b9:50:
         0b:11:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:00 2026 by rpki-client